$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b790cb79-00a6-34bf-b484-d8c1fe17da21.roa File: b790cb79-00a6-34bf-b484-d8c1fe17da21.roa (raw, json) Hash identifier: XdzHQIA2W2LRI47EvtPZIEKJfgGOO79kfJ7WGa1DoeM= Subject key identifier: E9:83:20:E0:2C:53:CA:86:F9:36:C0:81:5F:66:A4:AC:E4:08:27:C5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA39D2C1D9EDD7689E769C000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b790cb79-00a6-34bf-b484-d8c1fe17da21.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 701 IP address blocks: 67.90.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:2c:1d:9e:dd:76:89:e7:69:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=86cc0148-d310-445d-840a-a8266c3198f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:ae:38:87:d3:73:9f:b1:ba:1a:52:40:b1: 47:2a:9d:a0:0d:e1:bd:96:ed:45:01:c7:5b:09:91: 97:90:7a:d6:bb:9f:50:b7:79:ca:0f:69:59:37:ce: 71:a5:fa:33:d0:d3:d1:28:47:9f:3f:41:4f:d4:ed: 97:89:85:69:fa:0f:fa:f0:a3:dc:37:64:5c:43:f8: 20:56:96:ce:bb:b1:e6:56:bc:29:f1:a7:fc:e7:ee: a1:da:cf:fd:ba:2a:ab:97:40:54:0b:ed:29:80:d5: 58:9e:4c:98:53:8a:c5:f5:04:df:31:36:91:ee:98: 14:d1:a8:6d:02:80:f0:d1:3f:5e:41:b7:b4:9b:02: 8c:0e:8a:13:b9:47:89:10:94:28:39:ec:70:b0:de: 1f:c7:c5:0e:4b:11:71:9c:69:04:d6:00:b4:de:6a: 71:b4:d1:61:5c:dc:cf:64:8a:ef:66:a8:32:ab:3c: e2:c0:46:1f:42:b4:0a:6e:e7:7c:d6:a6:6d:09:85: 7d:e8:d4:b9:66:d4:1e:61:8a:fb:10:c5:a6:46:d9: 2d:65:a7:cc:15:b9:2b:c3:f1:e4:cf:0b:89:60:83: 4d:97:cd:1a:29:73:b5:5e:45:bb:18:c2:3f:d1:55: 9a:de:64:74:df:39:08:3a:77:14:e6:41:e2:41:78: 21:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:83:20:E0:2C:53:CA:86:F9:36:C0:81:5F:66:A4:AC:E4:08:27:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b790cb79-00a6-34bf-b484-d8c1fe17da21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 67.90.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:82:71:5c:eb:18:06:21:0f:8d:58:e5:ea:0e:38:dd:36:e7: a8:e1:dd:d6:23:10:91:ee:0a:1f:d3:a8:a7:1f:cf:fa:96:46: f1:d8:75:05:63:c0:ff:f0:74:f2:3a:3c:39:a0:01:72:7c:a7: 80:58:ad:aa:e3:32:2c:ff:c7:c7:88:1a:51:85:ae:b4:e2:b9: 43:3e:8b:01:d8:b5:c8:db:a7:14:7d:81:5c:5b:d7:b4:11:49: 46:d1:47:31:31:0b:57:3a:3e:9f:5f:ac:7d:f9:38:2a:0a:a2: 22:36:8e:94:70:ff:6e:51:ba:65:2c:12:df:f6:6e:bf:7c:5a: b6:77:aa:d4:cc:2f:29:53:c0:10:2d:a7:7a:85:50:a2:0b:9f: 63:aa:32:8e:6b:5d:5d:63:f6:ea:b6:c4:09:a2:61:70:d1:11: 84:51:5e:39:6e:c6:09:18:56:74:20:fd:2f:bb:71:de:53:45: d9:bc:36:95:4c:4e:bf:06:12:6b:d8:67:4a:49:a5:a2:6f:0a: 01:ae:dc:1d:5c:6c:0f:98:e8:1d:6d:80:f9:d5:77:67:67:d6: d7:c7:12:fa:07:5c:f8:44:ec:eb:62:5a:23:2c:4d:c1:c2:6f: bc:5c:1b:bf:f7:2c:89:d5:19:27:73:de:66:68:fe:c3:ff:cf: 0b:b5:28:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSwdnt12iedpwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODZjYzAxNDgtZDMxMC00NDVkLTg0MGEtYTgyNjZjMzE5OGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNeuOIfTc5+xuhpSQLFHKp2gDeG9lu1FAcdb CZGXkHrWu59Qt3nKD2lZN85xpfoz0NPRKEefP0FP1O2XiYVp+g/68KPcN2RcQ/gg VpbOu7HmVrwp8af85+6h2s/9uiqrl0BUC+0pgNVYnkyYU4rF9QTfMTaR7pgU0aht AoDw0T9eQbe0mwKMDooTuUeJEJQoOexwsN4fx8UOSxFxnGkE1gC03mpxtNFhXNzP ZIrvZqgyqzziwEYfQrQKbud81qZtCYV96NS5ZtQeYYr7EMWmRtktZafMFbkrw/Hk zwuJYINNl80aKXO1XkW7GMI/0VWa3mR03zkIOncU5kHiQXgh8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmDIOAsU8qG+TbAgV9mpKzkCCfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjc5MGNiNzktMDBhNi0z NGJmLWI0ODQtZDhjMWZlMTdkYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ1rIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKCcVzrGAYhD41Y5eoOON0256jh3dYjEJHuCh/TqKcfz/qWRvHYdQVj wP/wdPI6PDmgAXJ8p4BYrarjMiz/x8eIGlGFrrTiuUM+iwHYtcjbpxR9gVxb17QR SUbRRzExC1c6Pp9frH35OCoKoiI2jpRw/25RumUsEt/2br98WrZ3qtTMLylTwBAt p3qFUKILn2OqMo5rXV1j9uq2xAmiYXDREYRRXjluxgkYVnQg/S+7cd5TRdm8NpVM Tr8GEmvYZ0pJpaJvCgGu3B1cbA+Y6B1tgPnVd2dn1tfHEvoHXPhE7OtiWiMsTcHC b7xcG7/3LInVGSdz3mZo/sP/zwu1KLA= -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:05 2025 by rpki-client